dsh-plugin-vrmpet3d 0.1.2 → 0.1.4

package/desktop/game-visibility.cjs

@@ -0,0 +1,65 @@
+// A focused game temporarily hides only a pet window that was visible beforehand.
+// A transparent window can paint and report pixel hits after showInactive while
+// Chromium still uses the pre-hide input surface. A real bounds transition (the
+// same transition wheel zoom causes) rebuilds that surface without changing the pet.
+function refreshInputRegion(win, schedule = setTimeout) {
+  if (win.isDestroyed() || !win.isVisible()) return;
+  const original = win.getBounds();
+  const temporary = { ...original, width: original.width + 1 };
+  win.setBounds(temporary, false);
+  schedule(() => {
+    if (win.isDestroyed()) return;
+    const current = win.getBounds();
+    // A drag or another layout update owns its new bounds; never move it back.
+    if (['x', 'y', 'width', 'height'].every(key => current[key] === temporary[key])) win.setBounds(original, false);
+  }, 32);
+}
+function createVisibilityController(win, hooks = {}) {
+  let hiddenByGame = false;
+  return function apply(active) {
+    if (win.isDestroyed()) return;
+    if (active && !hiddenByGame && win.isVisible()) { hiddenByGame = true; hooks.suspend?.(); win.hide(); }
+    else if (!active && hiddenByGame) { hiddenByGame = false; win.showInactive(); hooks.resume?.(); }
+  };
+}
+function watchGameVisibility(win, pageURL, interval = 500, hooks = {}) {
+  const apply = createVisibilityController(win, hooks);
+  const url = new URL('/vrmpet3d/desktop', pageURL);
+  // The page and this poll must use the SAME Chromium session (cookies/proxy/TLS).
+  // Node's http.get never inherited the window's authentication cookies.
+  const session = win.webContents.session;
+  let request = null, stopped = false;
+  async function poll() {
+    if (stopped || request || win.isDestroyed()) return;
+    const controller = new AbortController();
+    request = controller;
+    const deadline = setTimeout(() => controller.abort(), 1500);
+    deadline.unref?.();
+    try {
+      const response = await session.fetch(url.href, {
+        credentials: 'include', redirect: 'error', cache: 'no-store', signal: controller.signal,
+      });
+      if (!response.ok || response.redirected || !/^application\/json\b/i.test(response.headers.get('content-type') || '')) {
+        await response.body?.cancel();
+        throw new Error('game status is not authenticated JSON');
+      }
+      const reader = response.body.getReader();
+      let size = 0;
+      const chunks = [];
+      try {
+        for (;;) {
+          const { value, done } = await reader.read();
+          if (done) break;
+          size += value.byteLength;
+          if (size > 16384) { await reader.cancel(); throw new Error('game status exceeds limit'); }
+          chunks.push(Buffer.from(value));
+        }
+      } finally { reader.releaseLock(); }
+      if (!stopped) apply(JSON.parse(Buffer.concat(chunks).toString('utf8')).gameFocused === true);
+    } catch (_) { if (!stopped) apply(false); }
+    finally { clearTimeout(deadline); if (request === controller) request = null; }
+  }
+  const timer = setInterval(poll, interval); timer.unref(); poll();
+  return function stop() { stopped = true; clearInterval(timer); if (request) request.abort(); apply(false); };
+}
+module.exports = { createVisibilityController, watchGameVisibility, refreshInputRegion };

package/desktop/main.js

@@ -11,6 +11,7 @@
 const { app, BrowserWindow, dialog, ipcMain, screen, shell } = require('electron');
 const fs = require('node:fs');
 const path = require('node:path');
+const { watchGameVisibility, refreshInputRegion } = require('./game-visibility.cjs');
 
 /** Cursor polling rate. The gaze is smoothed by the idle, so this is about drag latency. */
 const CURSOR_HZ = 60;
@@ -251,6 +252,19 @@ function writeSelfTest(code) {
   app.exit(code);
 }
 
+// A second game launch focuses the existing game instead of opening another process on its profile.
+const gameMode = options.config === true && new URL(options.url).pathname === '/vrmpet3d/game';
+let activeGameWindow = null;
+function focusGameWindow() {
+  if (!activeGameWindow || activeGameWindow.isDestroyed()) return;
+  if (activeGameWindow.isMinimized()) activeGameWindow.restore();
+  activeGameWindow.show(); activeGameWindow.focus();
+}
+if (gameMode) {
+  if (!app.requestSingleInstanceLock()) app.exit(0);
+  else app.on('second-instance', focusGameWindow);
+}
+
 /** The pet's rectangle on screen, as last reported by the page; null until it mounts. */
 let petRect = null;
 /** The right-click menu's rectangle in screen coordinates, while it is open. DOM, so the window holds it. */
@@ -269,6 +283,7 @@ let speechRect = null;
 let lastCursor = null;
 /** Whether the cursor is on a pixel the page actually painted — the page's own verdict. */
 let overPet = false;
+const inputDiagnostics = { through: true, recoveries: 0, regions: 0, events: {}, lastEvent: null };
 let interacting = false;
 /** True while the self-test drives the page with synthetic cursors. */
 let probing = false;
@@ -300,6 +315,7 @@ app.whenReady().then(async () => {
     // settings form. Read from the argument rather than from a separate entry point, because the rest of
     // the launcher (the borrowed runtime, the watchdog, the parent-pid handshake) is identical for both.
     const isConfig = options.config === true;
+    const isGame = isConfig && new URL(options.url).pathname === '/vrmpet3d/game';
 
     /**
      * Arm the self-test's own deadline before anything can hang.
@@ -329,7 +345,8 @@ app.whenReady().then(async () => {
       height: 860,
       minWidth: 560,
       minHeight: 420,
-      title: 'vrmpet3d - model settings',
+      title: isGame ? '吃白饭 · 桌宠弹球' : 'vrmpet3d - model settings',
+      fullscreen: isGame,
       backgroundColor: '#16171c',
       show: true,
       webPreferences: {
@@ -428,7 +445,7 @@ app.whenReady().then(async () => {
 
     const setClickThrough = (through) => {
       if (win.isDestroyed() || mouseThrough === through) return;
-      mouseThrough = through;
+      mouseThrough = through; inputDiagnostics.through = through;
       if (through) win.setIgnoreMouseEvents(true, { forward: true });
       else win.setIgnoreMouseEvents(false);
       keepOnTop();
@@ -651,6 +668,12 @@ app.whenReady().then(async () => {
         return null;
       }
     });
+    ipcMain.on('vrmpet3d:input-event', (event, value) => {
+      if (event.sender !== win.webContents || !value || !['pointerdown','pointerup','mousedown','mouseup','wheel'].includes(value.type)) return;
+      inputDiagnostics.events[value.type] = (inputDiagnostics.events[value.type] || 0) + 1;
+      inputDiagnostics.lastEvent = {type:value.type,button:Number.isInteger(value.button) ? value.button : null,
+        target:typeof value.target === 'string' ? value.target.slice(0,32) : '',trusted:value.trusted === true};
+    });
     ipcMain.on('vrmpet3d:rect', (_event, rect) => {
       if (!rect || typeof rect !== 'object') return;
       petRect = {
@@ -795,6 +818,31 @@ app.whenReady().then(async () => {
     });
     ipcMain.on('vrmpet3d:quit', () => app.quit());
     win.on('closed', () => app.quit());
+    if (!isConfig) {
+      const resetPetInput = () => {
+        interacting = false; overPet = false; zoomHoldUntil = 0; orbitFocus = false;
+        win.setFocusable(false); releaseOrbitLock();
+        // Recreate Electron's native forwarding hook; repeating `true` alone can reuse the stale hook after hide/show.
+        win.setIgnoreMouseEvents(false);
+        mouseThrough = false;
+        setClickThrough(true);
+        inputDiagnostics.recoveries++;
+        sendCursor(screen.getCursorScreenPoint());
+      };
+      const stopGameVisibility = watchGameVisibility(win, options.url, 500, {
+        suspend: resetPetInput,
+        resume: () => {
+          resetPetInput();
+          refreshInputRegion(win); inputDiagnostics.regions++;
+        },
+      });
+      win.once('closed', stopGameVisibility);
+    }
+
+    if (isGame) {
+      activeGameWindow = win;
+      win.once('closed', () => { activeGameWindow = null; });
+    }
 
     // The cursor is read from the OS rather than from page events: a click-through window
     // receives no pointer events at all outside the pet, so events cannot drive the gaze,
@@ -1624,6 +1672,14 @@ function announce(info) {
      * from the page state, so a page that never published reports `null` rather than a stale number.
      */
     frames: lastPageState && typeof lastPageState.frames === 'number' ? lastPageState.frames : null,
+    input: {
+      through: inputDiagnostics.through, recoveries: inputDiagnostics.recoveries,
+      regions: inputDiagnostics.regions, events: inputDiagnostics.events, lastEvent: inputDiagnostics.lastEvent,
+      cursor: lastCursor, pageCursor: lastPageState && lastPageState.cursor || null,
+      lastHit: lastPageState && lastPageState.lastHit || null,
+      hitReads: lastPageState && lastPageState.hitReads || 0,
+      hit: lastPageState && lastPageState.hit || null,
+    },
     over: overPet,
     interacting: interacting,
     rect: petRect,

package/desktop/preload.js

@@ -7,6 +7,16 @@
 // process, or any other window.
 const { contextBridge, ipcRenderer } = require('electron');
 
+// Read-only counters distinguish pixel hits from actual button delivery after hide/show.
+for (const type of ['pointerdown', 'pointerup', 'mousedown', 'mouseup', 'wheel']) {
+  document.addEventListener(type, event => {
+    ipcRenderer.send('vrmpet3d:input-event', {
+      type, button: event.button, trusted: event.isTrusted === true,
+      target: event.target && event.target.tagName || '',
+    });
+  }, true);
+}
+
 contextBridge.exposeInMainWorld('vrmpet3dDesktop', {
   /**
    * Ask for the launch configuration: which model to show, where the asset route lives.

package/lib/client.core.js

@@ -5013,7 +5013,7 @@ var MOTION_STATES = STATUS_STATES.concat(INTERACTION_STATES, ['dancing']);
     function load() {
       if (!supported || stopped) return Promise.resolve(null);
       var request = ++issued;
-      return doFetch(url, { credentials: 'omit' })
+      return doFetch(url, { credentials: 'same-origin' })
         .then(function (response) {
           if (response.status === 404 || response.status === 405) {
             supported = false;
@@ -5177,7 +5177,7 @@ var MOTION_STATES = STATUS_STATES.concat(INTERACTION_STATES, ['dancing']);
     function load() {
       if (!supported || stopped) return Promise.resolve(null);
       var request = ++issued;
-      return doFetch(url, { credentials: 'omit' })
+      return doFetch(url, { credentials: 'same-origin' })
         .then(function (response) {
           if (response.status === 404 || response.status === 405) {
             supported = false;
@@ -5221,7 +5221,7 @@ var MOTION_STATES = STATUS_STATES.concat(INTERACTION_STATES, ['dancing']);
   /**
    * The reporting half of `watchHostState`: the app's pet tells the host what it resolved.
    *
-   * Deduplicated on the last value SENT, so the sixty-per-second frame loop can call this on every change
+   * Deduplicated on the latest in-flight value or acknowledged value, so the frame loop can call this on every change
    * without a POST per frame — and a state that flaps back to what the host already has costs nothing.
    *
    * The 碎碎念 LINE travels with the state, and the dedupe key is both together: the pet can say something
@@ -5253,6 +5253,8 @@ var MOTION_STATES = STATUS_STATES.concat(INTERACTION_STATES, ['dancing']);
     var sentUnread = null;
     /** The last diagnostic sent (see `report`), so the heartbeat re-states what the state it repeats was based on. */
     var sentWhy = null;
+    var reportSequence = 0;
+    var pendingReport = null;
     var beatTimer = null;
     /**
      * What the heartbeat re-states: the last STATE and LINE, never the touch.
@@ -5473,22 +5475,27 @@ var MOTION_STATES = STATUS_STATES.concat(INTERACTION_STATES, ['dancing']);
         return JSON.stringify(value ? [value.waitingSessionIds || [], value.completedSessionIds || [],
           value.statusSessionId || null, value.completedSessionId || null] : [[], [], null, null]);
       };
-      if (force !== true && next === sent && nextLine === sentLine && nextTouchKey === sentTouchKey
-        && nextClockKey === sentClockKey && nextUnread === sentUnread && navigationKey(nextWhy) === navigationKey(sentWhy)) {
+      // Dedupe against the newest in-flight request, or the last ACKNOWLEDGED report.
+      // A rejected request must remain retryable; an older response cannot commit over a newer report.
+      if (!doFetch || !next) return Promise.resolve(null);
+      var key = JSON.stringify([next, nextLine, nextTouchKey, nextClockKey, nextUnread, navigationKey(nextWhy)]);
+      if (force !== true && ((pendingReport && pendingReport.key === key)
+        || (!pendingReport && next === sent && nextLine === sentLine && nextTouchKey === sentTouchKey
+          && nextClockKey === sentClockKey && nextUnread === sentUnread && navigationKey(nextWhy) === navigationKey(sentWhy)))) {
         return Promise.resolve(null);
       }
-      sent = next;
-      sentLine = nextLine;
-      sentTouch = nextTouch;
-      sentClock = nextClock;
-      sentUnread = nextUnread;
-      sentWhy = nextWhy;
-      // No state, no report: the host refuses an unknown name, and a line with no state behind it would only
-      // clear the state it is meant to accompany.
-      if (!doFetch || !next) return Promise.resolve(null);
-      // Recorded for the heartbeat AFTER the send is judged worth making, so a beat always repeats something the
-      // host has actually been told.
-      lastBeat = { state: next, line: nextLine, why: nextWhy };
+      var request = ++reportSequence;
+      pendingReport = { key: key, request: request };
+      // Heartbeats retry the latest desired STATE, never a one-shot touch event.
+      lastBeat = { state: next, line: nextLine, why: nextWhy, clock: nextClock, unread: nextUnread };
+      function failed() {
+        if (request === reportSequence) {
+          pendingReport = null;
+          sent = null;
+          sentLine = sentTouch = sentClock = sentUnread = sentWhy = null;
+        }
+        return null;
+      }
       try {
         var body = { state: next };
         if (nextLine) body.line = nextLine;
@@ -5496,16 +5503,57 @@ var MOTION_STATES = STATUS_STATES.concat(INTERACTION_STATES, ['dancing']);
         if (nextClock) body.clock = nextClock;
         if (nextUnread !== null) body.unread = nextUnread;
         if (nextWhy) body.why = nextWhy;
-        return doFetch(url, {
-          method: 'POST',
-          credentials: 'omit',
-          headers: { 'content-type': 'application/json' },
-          body: JSON.stringify(body),
-        }).then(function () { return next; }, function () { return null; });
+        return postReport(body).then(function (accepted) {
+          if (!accepted) return failed();
+          if (request === reportSequence) {
+            pendingReport = null;
+            sent = next;
+            sentLine = nextLine;
+            sentTouch = nextTouch;
+            sentClock = nextClock;
+            sentUnread = nextUnread;
+            sentWhy = nextWhy;
+          }
+          return next;
+        }).catch(failed);
       } catch (_error) {
-        return Promise.resolve(null);
+        return Promise.resolve(failed());
       }
     }
+    function readAcknowledgement(response) {
+      if (!response || !response.ok || response.redirected) return Promise.resolve(false);
+      return response.json().then(function (payload) {
+        return !!payload && typeof payload.seq === 'number' && Number.isFinite(payload.seq)
+          && payload.seq >= 0 && payload.superseded !== true;
+      });
+    }
+    function postReport(body) {
+      var controller = typeof AbortController === 'function' ? new AbortController() : null;
+      var deadline = null;
+      // A stalled fetch/body must not permanently suppress all subsequent heartbeats.
+      var timeoutMs = Number(settings.requestTimeoutMs) > 0 ? Number(settings.requestTimeoutMs) : 8000;
+      return new Promise(function (resolve, reject) {
+        deadline = setTimeout(function () {
+          if (controller) controller.abort();
+          resolve(false);
+        }, timeoutMs);
+        if (deadline && typeof deadline.unref === 'function') deadline.unref();
+        try {
+          var options = {
+            method: 'POST', credentials: 'same-origin', redirect: 'error',
+            headers: { 'content-type': 'application/json' }, body: JSON.stringify(body),
+          };
+          if (controller) options.signal = controller.signal;
+          Promise.resolve(doFetch(url, options)).then(readAcknowledgement).then(resolve, reject);
+        } catch (error) { reject(error); }
+      }).then(function (accepted) {
+        clearTimeout(deadline);
+        return accepted;
+      }, function (error) {
+        clearTimeout(deadline);
+        throw error;
+      });
+    }
     /**
      * Re-state the last report, unchanged, so that SILENCE can be told from DEATH.
      *
@@ -5522,7 +5570,8 @@ var MOTION_STATES = STATUS_STATES.concat(INTERACTION_STATES, ['dancing']);
        * all" on every beat — so the floating window lost the turn's 用时 a few seconds into every long turn. `force`
        * is the parameter that exists for this.
        */
-      return report(lastBeat.state, lastBeat.line, null, sentClock, true, sentUnread, lastBeat.why);
+      if (pendingReport) return Promise.resolve(null);
+      return report(lastBeat.state, lastBeat.line, null, lastBeat.clock, true, lastBeat.unread, lastBeat.why);
     }
 
     function startHeartbeat(intervalMs) {
@@ -5552,12 +5601,8 @@ var MOTION_STATES = STATUS_STATES.concat(INTERACTION_STATES, ['dancing']);
       if (!doFetch) return Promise.resolve(null);
       var message = error && (error.stack || error.message) ? String(error.stack || error.message) : String(error);
       try {
-        return doFetch(url, {
-          method: 'POST',
-          credentials: 'omit',
-          headers: { 'content-type': 'application/json' },
-          body: JSON.stringify({ state: sent || '', error: message.slice(0, 500) }),
-        }).then(function () { return message; }, function () { return null; });
+        return postReport({ state: sent || '', error: message.slice(0, 500) })
+          .then(function (accepted) { return accepted ? message : null; }).catch(function () { return null; });
       } catch (_error) {
         return Promise.resolve(null);
       }
@@ -5618,7 +5663,7 @@ var MOTION_STATES = STATUS_STATES.concat(INTERACTION_STATES, ['dancing']);
     function load() {
       if (!supported || stopped) return Promise.resolve(null);
       var request = ++issued;
-      return doFetch(url, { credentials: 'omit' })
+      return doFetch(url, { credentials: 'same-origin' })
         .then(function (response) {
           if (response.status === 404 || response.status === 405) {
             // No store on this host: stop asking, and let the caller keep its own storage.
@@ -5644,7 +5689,7 @@ var MOTION_STATES = STATUS_STATES.concat(INTERACTION_STATES, ['dancing']);
       var request = ++issued;
       return doFetch(url, {
         method: 'POST',
-        credentials: 'omit',
+        credentials: 'same-origin',
         headers: { 'content-type': 'application/json' },
         body: JSON.stringify(body || {}),
       })

package/lib/client.js

@@ -1667,6 +1667,19 @@
    */
   VrmPet3DWidget.prototype.openSettingsWindow = function (page) {
     var self = this;
+    if (page === 'game') {
+      var gameUrl = '/vrmpet3d/game?model=' + encodeURIComponent(self.currentModelId() || '');
+      if ((!globalThis.dshDesktop && !/Electron\//i.test(globalThis.navigator.userAgent)) || !self.canUseIndependentPet()) {
+        globalThis.open(gameUrl, '_blank', 'noopener'); return;
+      }
+      fetch('/vrmpet3d/desktop', { method: 'POST', credentials: 'same-origin',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ action: 'game', modelId: self.currentModelId() })
+      }).then(function (response) {
+        if (!response.ok) self.showStatus('小游戏窗口打开失败，请重试。');
+      }).catch(function () { self.showStatus('小游戏窗口打开失败，请重试。'); });
+      return;
+    }
     /**
      * Which window, and the host action that opens it.
      *
@@ -1692,7 +1705,7 @@
       fetch('/vrmpet3d/desktop', {
         method: 'POST',
         headers: { 'content-type': 'application/json' },
-        credentials: 'omit',
+        credentials: 'same-origin',
         // The model goes with the request: the model window must configure the model that is ON SCREEN, and this
         // surface is the only one that knows it at that moment. Without it the host can only fall back to the
         // launcher's model (or nothing), which is how the settings window ended up describing the built-in
@@ -1728,12 +1741,12 @@
     var send = function (body) {
       return fetch('/vrmpet3d/setup-state', {
         method: 'POST',
-        credentials: 'omit',
+        credentials: 'same-origin',
         headers: { 'content-type': 'application/json' },
         body: JSON.stringify(body),
       });
     };
-    return fetch('/vrmpet3d/setup-state', { credentials: 'omit' })
+    return fetch('/vrmpet3d/setup-state', { credentials: 'same-origin' })
       .then(function (response) { return response.ok ? response.json() : null; })
       .then(function (state) {
         if (!state || state.completed === true || state.prompted === true) return null;
@@ -1741,7 +1754,7 @@
           .then(function () {
             return fetch('/vrmpet3d/desktop', {
               method: 'POST',
-              credentials: 'omit',
+              credentials: 'same-origin',
               headers: { 'content-type': 'application/json' },
               body: JSON.stringify({ action: 'setup' }),
             });
@@ -1875,6 +1888,7 @@
     // 切换模型: the model picker's own page. It decides WHICH model every other page is about, so it is a
     // window of its own rather than a row inside 当前模型参数设置 (see ITEMS in lib/menu.js).
     if (id === 'switchModel') { this.openSettingsWindow('picker'); return; }
+    if (id === 'miniGame') { this.openSettingsWindow('game'); return; }
     /**
      * 重载模型 — re-read the model file and rebuild the scene (operator, 2026-10-14: 「给内置和外置宠物的右键菜单新增“重载模型”
      * 的选项，用来刷新模型」).
@@ -2259,7 +2273,7 @@
     this.syncDesktop(null, strings.desktopStarting);
     return fetch('/vrmpet3d/desktop', {
       method: 'POST',
-      credentials: 'omit',
+      credentials: 'same-origin',
       headers: { 'content-type': 'application/json' },
       body: JSON.stringify({
         action: enabled ? 'enable' : 'disable',
@@ -2282,7 +2296,7 @@
   /** Ask the host what the window is doing, and show it. */
   VrmPet3DWidget.prototype.refreshDesktopStatus = function () {
     var self = this;
-    return fetch('/vrmpet3d/desktop', { credentials: 'omit' })
+    return fetch('/vrmpet3d/desktop', { credentials: 'same-origin' })
       .then(function (response) { return response.ok ? response.json() : null; })
       .then(function (status) { self.syncDesktop(status, null); return status; })
       .catch(function () {
@@ -2990,7 +3004,7 @@
    */
   VrmPet3DWidget.prototype.refreshCatalog = function () {
     var self = this;
-    return fetch('/vrmpet3d/catalog', { credentials: 'omit' })
+    return fetch('/vrmpet3d/catalog', { credentials: 'same-origin' })
       .then(function (response) {
         if (!response.ok) throw new Error(word(self.language, 'catalogRoute', { status: response.status }));
         return response.json();
@@ -3208,7 +3222,7 @@
    */
   VrmPet3DWidget.prototype.refreshMotions = function () {
     var self = this;
-    return fetch('/vrmpet3d/motions', { credentials: 'omit' })
+    return fetch('/vrmpet3d/motions', { credentials: 'same-origin' })
       .then(function (response) {
         if (!response.ok) throw new Error('motion catalog route returned HTTP ' + response.status);
         return response.json();
@@ -3675,7 +3689,7 @@
   /** Fetch one motion's bytes from the host's byte route. */
   VrmPet3DWidget.prototype.fetchMotionBytes = function (motionId) {
     var url = '/vrmpet3d/motion?m=' + encodeURIComponent(motionId);
-    return fetch(url, { credentials: 'omit' }).then(function (response) {
+    return fetch(url, { credentials: 'same-origin' }).then(function (response) {
       if (!response.ok) throw new Error(word(this.language, 'motionRoute', { status: response.status }));
       return response.arrayBuffer();
     });
@@ -4284,7 +4298,7 @@
       return fetch('/vrmpet3d/say', {
         method: 'POST',
         headers: { 'content-type': 'application/json' },
-        credentials: 'omit',
+        credentials: 'same-origin',
         /**
          * The request carries five things, and each is a different answer to "what is this line about".
          *
@@ -5151,8 +5165,9 @@
                     var entries = ctx.slots.entries('sidebar.workspaces');
                     for (var i = 0; i < entries.length; i += 1) {
                       var injected = typeof entries[i].inject === 'function' ? entries[i].inject() : entries[i].inject;
-                      if (injected && typeof injected.open === 'function') { injected.open(id); return; }
+                      if (injected && typeof injected.open === 'function') { injected.open(id); return true; }
                     }
+                    return false;
                   },
                   onScopeChange: function (scope) { if (changeScope.current) changeScope.current(scope); },
                   /**
@@ -5171,6 +5186,21 @@
                   }
                 });
                 widgetRef.current = widget;
+                // A browser game opens this explicit query contract in a NEW DSH tab.
+                // Retry until the workspace slot is ready; consume the query only on success.
+                var gameTarget = new URL(globalThis.location.href).searchParams.get('vrmpet3d-session');
+                if (gameTarget && gameTarget.length <= 64) {
+                  var gameAttempts = 0;
+                  var gameNavigation = setInterval(function () {
+                    if (disposed || ++gameAttempts > 60) { clearInterval(gameNavigation); return; }
+                    if (widget.openSession(gameTarget)) {
+                      clearInterval(gameNavigation);
+                      var cleanUrl = new URL(globalThis.location.href);
+                      cleanUrl.searchParams.delete('vrmpet3d-session');
+                      globalThis.history.replaceState(globalThis.history.state, '', cleanUrl.href);
+                    }
+                  }, 250);
+                }
                 widgets.add(widget);
                 setStatus('ready');
               } catch (error) {

package/lib/client.menu.js

@@ -68,6 +68,7 @@
      * whose effect ends by itself (the clip finishes, or the user double-clicks the pet, or work starts).
      */
     'dance',
+    'miniGame',
     /**
      * 重载模型 — refresh the model on screen without touching anything else (operator, 2026-10-14: 「给内置和外置宠物的右键菜单
      * 新增“重载模型”的选项，用来刷新模型」).
@@ -110,6 +111,7 @@
       resetSize: 'Reset size',
       globalSettings: 'General settings',
       switchModel: 'Switch model',
+      miniGame: 'Pet breakout',
     reloadModel: 'Reload model',
     dance: 'Dance for me',
       modelSettings: "This model's parameters",
@@ -138,6 +140,7 @@
       resetSize: '重置大小',
       globalSettings: '通用设置',
       switchModel: '切换模型',
+      miniGame: '小游戏 · 吃白饭',
     reloadModel: '重载模型',
     dance: '跳支舞',
       modelSettings: '当前模型参数设置',

package/lib/client.scene.js

@@ -2060,11 +2060,12 @@
      * repeated GET of the same URL without touching the disk — which would make 重载模型 look like it did nothing. The
      * one-shot buster from `bustModelCache` rides the query string, and is consumed here so an ordinary load stays clean.
      */
-    if (this.modelBust) {
+    var reload = Boolean(this.modelBust);
+    if (reload) {
       url += (url.indexOf('?') === -1 ? '?' : '&') + 'v=' + this.modelBust;
       this.modelBust = null;
     }
-    var promise = fetch(url, { credentials: 'omit' })
+    var promise = fetch(url, { credentials: 'same-origin', cache: reload ? 'reload' : 'default' })
       .then(function (response) {
         if (!response.ok) throw new Error('asset route returned HTTP ' + response.status);
         return response.arrayBuffer();